Client Certificate Authentication Guide

Transcription

1 Client Certificate Authentication Guide April 4, For the most recent version of this document, visit our documentation website.

2 Table of Contents 1 Client certificate authentication 3 2 Configuring a user for client certificate authentication 3 3 Logging in to Relativity with client certificate authentication 4 Relativity Client Certificate Authentication Guide - 2

3 1 Client certificate authentication Relativity supports client certificate authentication, which may also be referred to as smart card authentication. This two factor authentication method uses a PIN and a client certificate stored on a personal identity verification (PIV) card. When logging in to Relativity, the user inserts a PIV card into the card reader, and clicks a PIV login button. Next, the user selects the appropriate certificate on the PIV card, and then enters a PIN. 2 Configuring a user for client certificate authentication In Relativity, you configure client certificate authentication at the user level. Before you begin, obtain the value in the Subject Alternative Name field of the certificate generated for a user. Contact your system or other administrator responsible for generating these certificates in your organization for this information. Use the following steps to configure a user for client certificate authentication: 1. Log in to Relativity with system admin credentials. 2. Select Home from the user drop-down menu. 3. Click the Users tab. 4. Click the Edit link next to an existing username, or create a new user. See Users on the Relativity RelativityOne Documentation site. 5. In the Login Method section, click New to open the Login Method Information form. 6. Select a Smart Card Provider. 7. In the Certificate Subject field, enter <Subject Alternative Name>. The Subject Alternative Name is associated with the certificate on the smart card used to log in to Relativity. Relativity Client Certificate Authentication Guide - 3

4 For example, if the Subject Alternative Name is then you would enter in the Certificate Subject field. 8. Click Save. The user can now use client certificate authentication to log in to Relativity. 3 Logging in to Relativity with client certificate authentication You can log in to Relativity by inserting your PIV card into your smart card reader, selecting a certificate, and entering your PIN. Use the following steps to log in to Relativity: 1. Insert your PIV card into the smart card reader for your computer. 2. Browse to your Relativity website with the URL provided by your system admin. 3. Enter your address in the Username box. 4. Click the button under the External Login heading. Your system admin may customize the label on the button for your Relativity application. Relativity Client Certificate Authentication Guide - 4

5 5. On the Select a certificate dialog, highlight the certificate used for logging in to Relativity. 6. Click OK. Relativity Client Certificate Authentication Guide - 5

6 7. Enter your PIN for your smart card, and click OK. Relativity Client Certificate Authentication Guide - 6

7 Proprietary Rights This documentation ( Documentation ) and the software to which it relates ( Software ) belongs to Relativity ODA LLC and/or Relativity s third party software vendors. Relativity grants written license agreements which contain restrictions. All parties accessing the Documentation or Software must: respect proprietary rights of Relativity and third parties; comply with your organization s license agreement, including but not limited to license restrictions on use, copying, modifications, reverse engineering, and derivative products; and refrain from any misuse or misappropriation of this Documentation or Software in whole or in part. The Software and Documentation is protected by the Copyright Act of 1976, as amended, and the Software code is protected by the Illinois Trade Secrets Act. Violations can involve substantial civil liabilities, exemplary damages, and criminal penalties, including fines and possible imprisonment Relativity ODA LLC. All rights reserved. Relativity is a registered trademark of Relativity ODA LLC. Relativity Client Certificate Authentication Guide - 7